14 Sep CISA orders agencies to patch Windows, iOS bugs used in attacks CISA added two new vulnerabilities to its list of security bugs exploited in the wild today, including a Windows privilege escalation vulnerability and an arbitrary code execution flaw affecting iPhones and Macs. […]
13 Sep Hackers now use ‘sock puppets’ for more realistic phishing attacks An Iranian-aligned hacking group uses a new, elaborate phishing technique involving multiple personas and email accounts to lure targets into opening malicious documents. […]
13 Sep Zero-day in WPGateway WordPress plugin actively exploited in attacks The Wordfence Threat Intelligence team warned today that WordPress sites are actively targeted with exploits targeting a zero-day vulnerability in the WPGateway premium plugin. […]
12 Sep Hackers steal Steam accounts in new Browser-in-the-Browser attacks Hackers are launching new attacks to steal Steam credentials using a Browser-in-the-Browser phishing technique that is rising in popularity among threat actors. […]
12 Sep U-Haul discloses data breach exposing customer driver licenses Moving and storage giant U-Haul International (U-Haul) disclosed a data breach after a customer contract search tool was hacked to access customers’ names and driver’s license information. […]
12 Sep Apple fixes eighth zero-day used to hack iPhones and Macs this year Apple has released security updates to address the eighth zero-day vulnerability used in attacks against iPhones and Macs since the start of the year. […]
11 Sep Firmware bugs in many HP computer models left unfixed for over a year A set of six high-severity firmware vulnerabilities impacting a broad range of HP devices used in enterprise environments are still waiting to be patched, although some of them were publicly disclosed since July 2021. […]
10 Sep Ransomware gangs switching to new intermittent encryption tactic A growing number of ransomware groups are adopting a new tactic that helps them encrypt their victims’ systems faster while reducing the chances of being detected and stopped. […]
09 Sep The Week in Ransomware – September 9th 2022 – Schools under fire Ransomware gangs have been busy this week, launching attacks against NAS devices, one of the largest hotel groups, IHG, and LAUSD, the second largest school district in the USA. […]
09 Sep Coinbase funds lawsuit against Tornado Cash cryptomixer sanctions Coinbase announced on Tuesday that it is funding a lawsuit brought by six people in the U.S. against the Department of Treasury’s for the sanctions on the Tornado Cash open-source cryptocurrency mixer platform. […]